Clusterroles used for prometheus access not functional on app-sre cluster

[pbergene]

The clusterroles used for app-sre cluster do not seem to grant prometheus access. The templated ones including the explicit namespace reference into resourceNames do not work for authz. This can be verified using the developer accounts in stage and is a blocker for QE and migrating the production environment.

cc @jfchevrette @s-urbaniak @squat @juzhao

  resourceNames:
  - <namespace>
  resources:
  - namespaces
  verbs:
  - get

[juzhao]

any update on this?

[squat]

I’ve been traveling all last week for some meetings and unable to tackle this. However, it is high priority and will be addressed this coming week.

[juzhao]

still "403 Permission Denied" error

[pbergene]

Any updates here?

[squat]

This is underway rn. Should be fixed today/tomorrow.

[pbergene]

How is this looking, do we have an understanding of this issue?

[pbergene]

Wee, thank you so much @squat - back on the road to migration.